Extracted

• • Target
    2026-11-05_549a17fc1edf5d943593bcb873db6ea8_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_smoke-loader_wapomi
  • Size 16.5MB
  • SHA256 d9edf36f0c961f0f446b1f305ef18049677edabe9755aa56dc64b148c36f93d3
  • MD5 549a17fc1edf5d943593bcb873db6ea8
  • SHA1 d13e383199d0a056c3eb620a53b57010b8f93776
  • SHA512 f550d8de858044a4a5810e14dc6484c4a70e1d5b940138fa0b40c03c2565cc36a12fe94da57a0ffba774e5f776259c53f87d9018d5b35e9f41e070bf02b0cf50
  • SSDEEP 393216:mgeKhWZNJMuI/dRJsv6tWKFdu9CzAynRz:bhaMu2V3R
  • TLSH
    T1BF079D41FBD24075F5F212704D7AB2674A3ABE054B3585DB63982ACE99302D23E3B71B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2